IT Network Engineer

PT SOLUSI PERTAHANAN DIGITAL; Jakarta Pusat; On-site; IDR 250,000,000 - 550,000,000; Full time

Job summary

PT SOLUSI PERTAHANAN DIGITAL is seeking a Network Security Engineer to design, deploy, and manage secure network infrastructures for internal and client environments. You will lead security implementation projects and work closely with the Blue Team.

Five years in Network Engineering with 2–3 years in Network Security is expected, plus hands-on firewall/WAF experience and IAM/EDR familiarity. Strong communication and documentation skills are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in Network Engineering, with 2–3 years specializing in Network Security and hands-on firewall/WAF implementation.
• Proven experience with multiple enterprise security platforms such as Fortinet, Sangfor, Palo Alto, Check Point, Cloudflare, or AWS WAF.
• Strong understanding of network security architecture, including TCP/IP, routing, VLAN, NAT, VPN, IPS/IDS, and HA.
• Experience implementing Identity & Access Management (IAM) solutions (Keycloak, LDAP, Active Directory, SSO) and Endpoint Security/EDR is preferred.
• Familiarity with SIEM integration, log forwarding, and security visibility concepts; ability to work with SOC teams.
• Experience leading end-to-end deployment projects, including design, implementation, migration, troubleshooting, and documentation.
• Strong client-facing communication skills and ability to present technical solutions and manage deliverables.

Responsibilities

• Design, deploy, and configure Network Security Perimeter solutions (Firewalls, WAF, VPN, IPS/IDS) for internal and client environments.
• Implement and manage security platforms such as Fortinet, Sangfor NGAF, Palo Alto, Check Point, Cloudflare, and AWS WAF.
• Perform maintenance on network and security infrastructure including firmware upgrades and patch management.
• Deliver client-facing security solutions (IAM, certificate management, endpoint protection) as required.
• Collaborate with Blue Team (SOC, DFIR, CTI) to ensure visibility for SIEM (Wazuh) and remove monitoring blind spots.
• Produce and maintain network diagrams, baselines, deployment guides, and SOPs.
• Act as Technical Lead for network security projects from deployment through handover.

Skills

Network security

Firewall configuration

WAF deployment

SIEM integration

IAM management

Linux

Scripting

Project leadership

Client facing

Documentation

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity

Tools

Fortinet

Sangfor

Palo Alto Networks

Check Point

Cloudflare

AWS WAF

Job description

We are looking for a Network Security Engineer to lead the design, deployment, and maintenance of network security solutions for both internal infrastructure and client environments.

This role bridges traditional Network Engineering with Cybersecurity Operations, ensuring secure, resilient, and well‑monitored network infrastructures. You will work closely with our Blue Team (SOC, DFIR, and CTI) while serving as the technical lead for network security implementation projects.

Key Responsibilities

Design, deploy, and configure Network Security Perimeter solutions, including Firewalls, WAF, VPN, IPS/IDS, for both internal and client environments.

Implement and manage security platforms such as FortiGate, Sangfor NGAF, AWS WAF/Array WAF, and future deployments including Palo Alto Networks.

Perform preventive and corrective maintenance on network and security infrastructure, including firmware upgrades, patch management, capacity monitoring, and incident troubleshooting.

Implement client‑facing security solutions such as Identity & Access Management (Keycloak, LDAP/Active Directory, SSO), Certificate Management, and Endpoint Protection (e.g., CrowdStrike) according to project requirements.

Collaborate closely with the Blue Team (SOC, DFIR, and CTI) to ensure network configurations provide optimal visibility for SIEM (Wazuh) and eliminate monitoring blindspots.

Produce and maintain technical documentation, including network diagrams, configuration baselines, deployment guides, and maintenance SOPs.

Serve as the Technical Lead for network security implementation projects, independently managing technical execution from deployment through project handover.

Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Minimum 5 years of experience in Network Engineering, including at least 2-3 years specializing in Network Security with hands‑on experience in firewall and WAF implementation.

Strong hands‑on experience with multiple enterprise security platforms, such as Fortinet, Sangfor, Palo Alto Networks, Check Point, Cloudflare, or AWS WAF.

Solid understanding of network security architecture, including TCP/IP, routing & switching, VLAN, NAT, VPN (Site-to-Site & Remote Access), IPS/IDS, network segmentation, and High Availability (HA).

Experience implementing and managing Identity & Access Management (IAM) solutions (Keycloak, LDAP, Active Directory, SSO) and Endpoint Security/EDR solutions is highly preferred.

Familiarity with SIEM integration, log forwarding, and security visibility concepts, with the ability to work closely with SOC teams.

Experience leading end‑to‑end deployment projects, including solution design, implementation, migration, troubleshooting, and technical documentation.

Strong client‑facing communication skills with the ability to present technical solutions and manage project deliverables independently.

Working knowledge of Linux operating systems and basic scripting/automation using Python, Bash, or Ansible.

Relevant industry certifications (e.g., Fortinet, Palo Alto, Check Point, AWS Security, or equivalent) are considered an advantage.